Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46fa0e99-1570-3997-a7b1-f36198d9e240.roa
File:                     46fa0e99-1570-3997-a7b1-f36198d9e240.roa (raw, json)
Hash identifier:          mrC+qYfP0S00Uni/zJQ2JHkLt66LzVD77LVBmyVC52A=
Subject key identifier:   4B:FD:3F:A6:BF:6A:91:F6:BC:66:F0:3F:51:B6:4B:DD:6C:AB:44:7F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6EFEB5DDF3C5C6F02DD3C580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46fa0e99-1570-3997-a7b1-f36198d9e240.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        67.202.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:fe:b5:dd:f3:c5:c6:f0:2d:d3:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=a8b3a9e4-4614-4246-9eed-2f1806ee6e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:8b:1d:47:f7:cb:ee:75:51:08:87:5e:74:
                    9f:0a:d5:ee:13:64:a5:46:aa:60:1e:90:86:32:7b:
                    45:de:f0:11:e4:49:83:f1:b3:fe:c0:cf:6e:f9:34:
                    3b:53:37:63:18:91:66:99:0e:1d:7f:42:e5:1d:8d:
                    39:3b:db:ae:21:4f:a2:75:a0:ba:1f:14:6a:23:ab:
                    55:7d:62:b6:51:2e:09:e3:5c:4d:6e:1e:2f:63:18:
                    89:5b:e8:b5:f2:03:c6:ca:ee:62:5e:1c:86:16:06:
                    2d:2a:b8:04:1c:45:a8:4f:f8:7f:93:83:c1:b3:1f:
                    fa:87:78:d7:fb:1c:d4:41:10:f5:62:7b:12:46:f0:
                    27:e0:7f:cf:f6:93:7d:31:55:61:07:a3:58:2c:dc:
                    77:21:ec:e6:eb:64:e1:09:90:56:12:b5:ea:39:89:
                    72:f3:f4:95:77:f7:cd:29:da:86:b9:b2:48:09:b7:
                    fb:ef:bc:12:c3:23:05:54:63:ba:73:9f:f6:ac:33:
                    16:dd:02:fe:8b:d7:05:b5:0c:72:f6:8b:7a:76:be:
                    4c:27:7b:00:9b:8a:09:51:29:11:81:e2:28:74:20:
                    bd:a0:04:91:89:02:5e:30:fb:85:d9:24:8e:08:b8:
                    44:1d:08:5b:a1:c8:d2:83:0b:01:ec:e6:22:a0:5e:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FD:3F:A6:BF:6A:91:F6:BC:66:F0:3F:51:B6:4B:DD:6C:AB:44:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46fa0e99-1570-3997-a7b1-f36198d9e240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:5c:5f:1c:78:c8:1c:5a:1c:d4:26:8c:0e:f8:d7:9d:c0:
         07:01:d0:bf:1d:bd:62:56:94:a0:95:83:5b:f8:ae:06:96:30:
         dc:b2:47:16:0d:1a:e2:42:ae:40:e4:28:0f:0d:55:f4:32:2b:
         50:7d:64:be:0d:e2:30:9e:ab:0c:e4:85:50:8c:64:a4:3f:51:
         49:b5:fa:ee:91:33:d3:03:50:20:d7:32:8e:0c:e6:97:81:44:
         00:72:8f:8e:ee:58:d6:b9:b7:fc:6f:72:fe:9f:02:c7:c6:c3:
         05:5c:67:f7:f2:33:e2:06:3c:ab:3f:98:36:02:1d:ec:14:6f:
         7e:4e:fb:4a:8f:a9:be:b4:a4:91:ea:11:d5:57:a5:24:cc:96:
         be:2c:23:7a:5b:0a:8c:07:a4:9e:ba:5b:a2:05:b7:72:80:a5:
         1a:03:20:14:08:ff:3d:a4:07:db:90:17:f5:aa:25:ca:66:00:
         63:74:8c:f4:97:08:7c:2a:55:b0:f8:65:ae:78:1e:f2:99:26:
         55:e4:9d:0d:c1:ac:5b:39:b7:e3:71:75:ee:7f:82:27:61:93:
         73:0e:bb:8b:49:90:fa:b2:5d:57:2d:bd:c6:91:ae:0b:74:91:
         cc:68:f6:14:85:3f:00:ac:55:df:f6:b9:d3:92:ef:df:76:fc:
         ba:49:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:20 2025 by rpki-client